CVE-2020-22656

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-01-20 · updated 2026-06-17
Weakness: CWE-1272

Description

In Ruckus R310 10.5.1.0.199, Ruckus R500 10.5.1.0.199, Ruckus R600 10.5.1.0.199, Ruckus T300 10.5.1.0.199, Ruckus T301n 10.5.1.0.199, Ruckus T301s 10.5.1.0.199, SmartCell Gateway 200 (SCG200) before 3.6.2.0.795, SmartZone 100 (SZ-100) before 3.6.2.0.795, SmartZone 300 (SZ300) before 3.6.2.0.795, Virtual SmartZone (vSZ) before 3.6.2.0.795, ZoneDirector 1100 9.10.2.0.130, ZoneDirector 1200 10.2.1.0.218, ZoneDirector 3000 10.2.1.0.218, ZoneDirector 5000 10.0.1.0.151, a vulnerability allows attackers to make the Secure Boot in failed attempts state (rfwd).

Affected products

Ruckuswireless R310 Firmware: 10.5.1.0.199
Ruckuswireless R500 Firmware: 10.5.1.0.199
Ruckuswireless R600 Firmware: 10.5.1.0.199
Ruckuswireless Scg200 Firmware: before 3.6.2.0.795 — fixed in 3.6.2.0.795
Ruckuswireless Sz-100 Firmware: before 3.6.2.0.795 — fixed in 3.6.2.0.795
Ruckuswireless Sz-300 Firmware: before 3.6.2.0.795 — fixed in 3.6.2.0.795
Ruckuswireless T300 Firmware: 10.5.1.0.199
Ruckuswireless T301N Firmware: 10.5.1.0.199
Ruckuswireless T301S Firmware: 10.5.1.0.199
Ruckuswireless Vsz Firmware: before 3.6.2.0.795 — fixed in 3.6.2.0.795
Ruckuswireless Zonedirector 1100 Firmware: 9.10.2.0.130
Ruckuswireless Zonedirector 1200 Firmware: 10.2.1.0.218
Ruckuswireless Zonedirector 3000 Firmware: 10.2.1.0.218
Ruckuswireless Zonedirector 5000 Firmware: 10.0.1.0.151

How to fix

Upgrade to a fixed version: Ruckuswireless Scg200 Firmware 3.6.2.0.795; Ruckuswireless Sz-100 Firmware 3.6.2.0.795; Ruckuswireless Sz-300 Firmware 3.6.2.0.795; Ruckuswireless Vsz Firmware 3.6.2.0.795. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2020-22656 or the next vulnerability affects your stack